1. Introduction

​

Excellent Management Limited ("Company," "we," "our," or "us") is a technology company providing software, cloud-based services, and related technology solutions (the “Services”).

We are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website https://www.xmlhk.com (the “Website”) and use our Services.

By accessing or using our Website or Services, you agree to the practices described in this Privacy Policy.

​

2. Information We Collect

A. Information You Provide to Us

We may collect personal information that you voluntarily provide, including:

• Name

• Business name

• Job title

• Email address

• Phone number

• Inquiries and communications

• Demo or contact form submissions

 

B. Information Collected Automatically

When you access our Website or Services, we may automatically collect:

• IP address

• Device identifiers

• Browser type and version

• Operating system

• Usage data and interaction logs

• Date and time of visits

• Referral URLs

• System activity and error logs

We may use cookies and similar technologies for analytics, security, and functionality.

 

C. Customer Data (For SaaS or Cloud Services)

If you use our technology platform, we may process data on behalf of our customers (“Customer Data”). In such cases:

• We act as a data processor/service provider

• The customer acts as the data controller/business

• We process Customer Data only according to contractual instructions

 

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain our Services

• Create and manage user accounts

• Process transactions and billing

• Provide technical support

• Improve system performance and security

• Develop new features and services

• Send service-related communications

• Send marketing communications (you may opt out)

• Comply with legal obligations

• Detect, prevent, and respond to fraud, abuse, or security incidents

 

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), we process personal data based on:

• Contractual necessity

• Legitimate business interests

• Consent (where required)

• Compliance with legal obligations

 

5. Sharing and Disclosure

We do not sell personal information.

We may share information with:

• Cloud hosting providers

• Payment processors

• Analytics providers

• Security and fraud prevention providers

• Professional advisors (legal, accounting)

• Government authorities when required by law

• Affiliates and subsidiaries

• Successors in the event of a merger, acquisition, or sale

All service providers are contractually obligated to protect your information.

 

6. International Data Transfers

As a technology company, we may transfer data internationally, including to servers located outside your country. We implement appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)

• Data Processing Agreements (DPAs)

• Other legally approved transfer mechanisms

 

7. Data Retention

We retain personal data only for as long as necessary to:

• Provide Services

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

Customer Data retention is governed by customer agreements.

 

8. Data Security

We implement industry-standard security measures including:

• Encryption in transit (e.g., TLS)

• Encryption at rest (where applicable)

• Access controls and authentication

• Network monitoring

• Security audits and vulnerability testing

However, no system can guarantee absolute security.

 

9. Your Privacy Rights

Depending on your location, you may have rights to:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Restrict or object to processing

• Data portability

• Opt out of marketing communications

• Opt out of the sale or sharing of personal information (if applicable)

To exercise your rights, contact us at:
Email: xmlsales@xmlhk.com

 

10. Cookies and Tracking Technologies

We use cookies for:

• Essential website functionality

• Authentication

• Analytics

• Performance monitoring

• Marketing (if applicable)

You may control cookies through your browser settings.

 

11. Third-Party Services

Our Website or Services may integrate with third-party services (e.g., APIs, plugins, analytics tools). We are not responsible for the privacy practices of third parties.

 

12. Children’s Privacy

Our Services are not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

 

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The updated version will be posted on this page with a revised “Last Updated” date.